mirror of
https://gitee.com/iresty/apisix.git
synced 2024-12-14 08:51:29 +08:00
4efc1202dc
* optimize: avoid concat string object, and kept source route id and service id. * default config: changed the timeout of etcd to 3 sec.
77 lines
3.5 KiB
YAML
77 lines
3.5 KiB
YAML
apisix:
|
|
node_listen: 9080 # APISIX listening port
|
|
enable_heartbeat: true
|
|
enable_admin: true
|
|
enable_debug: false
|
|
enable_ipv6: true
|
|
config_center: etcd # etcd: use etcd to store the config value
|
|
# yaml: fetch the config value from local yaml file `/your_path/conf/apisix.yaml`
|
|
# allow_admin: # http://nginx.org/en/docs/http/ngx_http_access_module.html#allow
|
|
# - 127.0.0.0/24 # If we don't set any IP list, then any IP access is allowed by default.
|
|
# - "::/64"
|
|
# port_admin: 9180 # use a separate port
|
|
real_ip_header: "X-Real-IP" # http://nginx.org/en/docs/http/ngx_http_realip_module.html#real_ip_header
|
|
real_ip_from: # http://nginx.org/en/docs/http/ngx_http_realip_module.html#set_real_ip_from
|
|
- 127.0.0.1
|
|
- 'unix:'
|
|
router:
|
|
http: 'radixtree_uri' # radixtree_uri: match route by uri(base on radixtree)
|
|
# radixtree_host_uri: match route by host + uri(base on radixtree)
|
|
ssl: 'radixtree_sni' # radixtree_sni: match route by SNI(base on radixtree)
|
|
# stream_proxy: # TCP/UDP proxy
|
|
# tcp: # TCP proxy port list
|
|
# - 9100
|
|
# - 9101
|
|
# udp: # UDP proxy port list
|
|
# - 9200
|
|
# - 9211
|
|
dns_resolver: # default DNS resolver, with disable IPv6 and enable local DNS
|
|
- 114.114.114.114
|
|
- 223.5.5.5
|
|
- 1.1.1.1
|
|
- 8.8.8.8
|
|
|
|
ssl:
|
|
enable: true
|
|
enable_http2: true
|
|
listen_port: 9443
|
|
ssl_protocols: "TLSv1 TLSv1.1 TLSv1.2 TLSv1.3"
|
|
ssl_ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA"
|
|
|
|
nginx_config: # config for render the template to genarate nginx.conf
|
|
error_log: "logs/error.log"
|
|
error_log_level: "warn" # warn,error
|
|
event:
|
|
worker_connections: 10620
|
|
http:
|
|
access_log: "logs/access.log"
|
|
keepalive_timeout: 60s # timeout during which a keep-alive client connection will stay open on the server side.
|
|
client_header_timeout: 60s # timeout for reading client request header, then 408 (Request Time-out) error is returned to the client
|
|
client_body_timeout: 60s # timeout for reading client request body, then 408 (Request Time-out) error is returned to the client
|
|
send_timeout: 10s # timeout for transmitting a response to the client.then the connection is closed
|
|
|
|
etcd:
|
|
host: "http://127.0.0.1:2379" # etcd address
|
|
prefix: "/apisix" # apisix configurations prefix
|
|
timeout: 3 # 3 seconds
|
|
|
|
plugins: # plugin list
|
|
- example-plugin
|
|
- limit-req
|
|
- limit-count
|
|
- limit-conn
|
|
- key-auth
|
|
- prometheus
|
|
- node-status
|
|
- jwt-auth
|
|
- zipkin
|
|
- ip-restriction
|
|
- grpc-transcode
|
|
- serverless-pre-function
|
|
- serverless-post-function
|
|
- openid-connect
|
|
- proxy-rewrite
|
|
|
|
stream_plugins:
|
|
- mqtt-proxy
|